South Carolina State University

Personal data of 3,000 South Carolina college scholarship recipients has been exposed for nearly a year.

A glitch in switching programs exposed personal data, including names, addresses and Social Security numbers since May 2017.

A review found two or three instances of unauthorized access while the data was available online, but it remains unclear who saw the information or whether any details have been used by identity thieves.

Source: https://www.postandcourier.com/politics/personal-data-of-south-carolina-college-scholarship-recipients-exposed-for/article_2a5d9f26-2620-11e8-995c-fb89361f26d9.html

TPRM report: https://scoringcyber.rankiteo.com/company/south-carolina-state-university_2

"id": "sou20279622",
"linkid": "south-carolina-state-university_2",
"type": "Data Leak",
"date": "03/2018",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 3000,
                        'industry': 'Education',
                        'location': 'South Carolina',
                        'name': 'South Carolina College Scholarship Program',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Software Glitch',
 'data_breach': {'number_of_records_exposed': 3000,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information']},
 'description': 'Personal data of 3,000 South Carolina college scholarship '
                'recipients has been exposed for nearly a year due to a glitch '
                'in switching programs.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Social Security Numbers']},
 'post_incident_analysis': {'root_causes': 'Software Glitch'},
 'title': 'Data Exposure of South Carolina College Scholarship Recipients',
 'type': 'Data Exposure',
 'vulnerability_exploited': 'Improper Data Handling'}